Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

RFE: Add support for creating a macsec netdev and configure equivalent interface in systemd-networkd #5754

Closed
1 of 2 tasks
gkarakou opened this issue Apr 18, 2017 · 5 comments
Closed
1 of 2 tasks

RFE: Add support for creating a macsec netdev and configure equivalent interface in systemd-networkd #5754

gkarakou opened this issue Apr 18, 2017 · 5 comments
Labels
network RFE 🎁 Request for Enhancement, i.e. a feature request

Comments

@gkarakou
Copy link

gkarakou commented Apr 18, 2017 •
edited

Submission type

  • Bug report
  • Request for enhancement (RFE)

systemd version the issue has been seen with

latest

Used distribution

fedora 25

It would be a useful addition to add suport for a macsec netdev in systemd-networkd.
Since support for macsec(IEEE 802.1AE) is already added in kernel (from 4.6 kernel series[1] ) as a loadable module, fedora doesn't come with a patched iproute package[2] to support macsec and also lacks interface configuration from systemd-networkd.
Therefore it would be wise to implement support for an IEEE standard[3].

Sources:
[1]https://kernelnewbies.org/Linux_4.6
[2] http://man7.org/linux/man-pages/man8/ip-macsec.8.html
[3] https://standards.ieee.org/findstds/standard/802.1AE-2006.html

Some references of interest:
https://en.wikipedia.org/wiki/IEEE_802.1AE
https://developers.redhat.com/blog/2016/10/14/macsec-a-different-solution-to-encrypt-network-traffic/
@gkarakou gkarakou changed the title RFE: Add support for creating a macsec netdev and configure equivalent interface in systed-networkd RFE: Add support for creating a macsec netdev and configure equivalent interface in systemd-networkd Apr 18, 2017
@poettering poettering added network RFE 🎁 Request for Enhancement, i.e. a feature request labels Apr 24, 2017
@ssahani
Copy link
Contributor

ssahani commented Apr 24, 2017

We need the generic netlink to be in first #5593. This work should be on top of that.

@ssahani ssahani mentioned this issue Dec 7, 2017
Closed
@yuwata
Copy link
Member

yuwata commented Feb 26, 2019

@ssahani #9170 (revised version of #5593) has been already merged. Are you working on this? Or do you have any plan to support this?

@ssahani
Copy link
Contributor

ssahani commented Feb 26, 2019

I have patches need some time to complete these.

@ssahani
Copy link
Contributor

ssahani commented Mar 29, 2019

I have started working on this again. My WIP branch.

master...ssahani:macsec

ssahani pushed a commit to ssahani/systemd that referenced this issue Apr 2, 2019
networkd: Introduce MACsec
18ce6be 
This work introduces MACsec to networkd.

Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

11-macsec.netdev
```
[NetDev]
Name=macsec-test
Kind=macsec

[MACSEC]
Port=11

[MACsecReceiveAssociation]
Port=1234
MACAddress=c6:19:52:8f:e6:a0
PacketNumber=1
KeyId=00
Key=82828282828282828282828282828282

[MACsecReceiveChannel]
Port=1234
MACAddress=c6:19:52:8f:e6:a0

[MACsecSecureAssociation]
PacketNumber=1024
KeyId=01
Key=81818181818181818181818181818181

```

closes systemd#5754
@ssahani ssahani mentioned this issue Apr 2, 2019
Closed
ssahani pushed a commit to ssahani/systemd that referenced this issue Apr 2, 2019
networkd: Introduce MACsec
796dcc8 
This work introduces MACsec to networkd.

Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

11-macsec.netdev
```
[NetDev]
Name=macsec-test
Kind=macsec

[MACSEC]
Port=11

[MACsecReceiveAssociation]
Port=1234
MACAddress=c6:19:52:8f:e6:a0
PacketNumber=1
KeyId=00
Key=82828282828282828282828282828282

[MACsecReceiveChannel]
Port=1234
MACAddress=c6:19:52:8f:e6:a0

[MACsecSecureAssociation]
PacketNumber=1024
KeyId=01
Key=81818181818181818181818181818181

```

closes systemd#5754
@ssahani
Copy link
Contributor

ssahani commented Apr 2, 2019

@gkarakou I have opened a PR now could please test.

ssahani pushed a commit to ssahani/systemd that referenced this issue Apr 2, 2019
networkd: Introduce MACsec
3da50ac 
This work introduces MACsec to networkd.

Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

11-macsec.netdev
```
[NetDev]
Name=macsec-test
Kind=macsec

[MACSEC]
Port=11

[MACsecReceiveAssociation]
Port=1234
MACAddress=c6:19:52:8f:e6:a0
PacketNumber=1
KeyId=00
Key=82828282828282828282828282828282

[MACsecReceiveChannel]
Port=1234
MACAddress=c6:19:52:8f:e6:a0

[MACsecTransmitAssociation]
PacketNumber=1024
KeyId=01
Key=81818181818181818181818181818181

```

closes systemd#5754
ssahani pushed a commit to ssahani/systemd that referenced this issue Apr 2, 2019
networkd: Introduce MACsec
91b27c3 
This work introduces MACsec to networkd.

Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

11-macsec.netdev
```
[NetDev]
Name=macsec-test
Kind=macsec

[MACSEC]
Port=11

[MACsecReceiveAssociation]
Port=1234
MACAddress=c6:19:52:8f:e6:a0
PacketNumber=1
KeyId=00
Key=82828282828282828282828282828282

[MACsecReceiveChannel]
Port=1234
MACAddress=c6:19:52:8f:e6:a0

[MACsecTransmitAssociation]
PacketNumber=1024
KeyId=01
Key=81818181818181818181818181818181

```

closes systemd#5754
ssahani pushed a commit to ssahani/systemd that referenced this issue Apr 2, 2019
networkd: Introduce MACsec
077a991 
This work introduces MACsec to networkd.

Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

11-macsec.netdev
```
[NetDev]
Name=macsec-test
Kind=macsec

[MACSEC]
Port=11

[MACsecReceiveAssociation]
Port=1234
MACAddress=c6:19:52:8f:e6:a0
PacketNumber=1
KeyId=00
Key=82828282828282828282828282828282

[MACsecReceiveChannel]
Port=1234
MACAddress=c6:19:52:8f:e6:a0

[MACsecTransmitAssociation]
PacketNumber=1024
KeyId=01
Key=81818181818181818181818181818181

```

closes systemd#5754
ssahani pushed a commit to ssahani/systemd that referenced this issue Apr 2, 2019
networkd: Introduce MACsec
19196a5 
This work introduces MACsec to networkd.

Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

11-macsec.netdev
```
[NetDev]
Name=macsec-test
Kind=macsec

[MACSEC]
Port=11

[MACsecReceiveAssociation]
Port=1234
MACAddress=c6:19:52:8f:e6:a0
PacketNumber=1
KeyId=00
Key=82828282828282828282828282828282

[MACsecReceiveChannel]
Port=1234
MACAddress=c6:19:52:8f:e6:a0

[MACsecTransmitAssociation]
PacketNumber=1024
KeyId=01
Key=81818181818181818181818181818181

```

closes systemd#5754
ssahani pushed a commit to ssahani/systemd that referenced this issue Apr 3, 2019
networkd: Introduce MACsec
ab6002e 
This work introduces MACsec to networkd.

Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

11-macsec.netdev
```
[NetDev]
Name=macsec-test
Kind=macsec

[MACSEC]
Port=11

[MACsecReceiveAssociation]
Port=1234
MACAddress=c6:19:52:8f:e6:a0
PacketNumber=1
KeyId=00
Key=82828282828282828282828282828282

[MACsecReceiveChannel]
Port=1234
MACAddress=c6:19:52:8f:e6:a0

[MACsecTransmitAssociation]
PacketNumber=1024
KeyId=01
Key=81818181818181818181818181818181

```

closes systemd#5754
ssahani pushed a commit to ssahani/systemd that referenced this issue Apr 3, 2019
networkd: Introduce MACsec
63e3965 
This work introduces MACsec to networkd.

Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

11-macsec.netdev
```
[NetDev]
Name=macsec-test
Kind=macsec

[MACSEC]
Port=11

[MACsecReceiveAssociation]
Port=1234
MACAddress=c6:19:52:8f:e6:a0
PacketNumber=1
KeyId=00
Key=82828282828282828282828282828282

[MACsecReceiveChannel]
Port=1234
MACAddress=c6:19:52:8f:e6:a0

[MACsecTransmitAssociation]
PacketNumber=1024
KeyId=01
Key=81818181818181818181818181818181

```

closes systemd#5754
ssahani pushed a commit to ssahani/systemd that referenced this issue Apr 3, 2019
networkd: Introduce MACsec
015e711 
This work introduces MACsec to networkd.

Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

11-macsec.netdev
```
[NetDev]
Name=macsec-test
Kind=macsec

[MACSEC]
Port=11

[MACsecReceiveAssociation]
Port=1234
MACAddress=c6:19:52:8f:e6:a0
PacketNumber=1
KeyId=00
Key=82828282828282828282828282828282

[MACsecReceiveChannel]
Port=1234
MACAddress=c6:19:52:8f:e6:a0

[MACsecTransmitAssociation]
PacketNumber=1024
KeyId=01
Key=81818181818181818181818181818181

```

closes systemd#5754
ssahani pushed a commit to ssahani/systemd that referenced this issue Apr 3, 2019
networkd: Introduce MACsec
2430c7c 
This work introduces MACsec to networkd.

Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

11-macsec.netdev
```
[NetDev]
Name=macsec-test
Kind=macsec

[MACSEC]
Port=11

[MACsecReceiveAssociation]
Port=1234
MACAddress=c6:19:52:8f:e6:a0
PacketNumber=1
KeyId=00
Key=82828282828282828282828282828282

[MACsecReceiveChannel]
Port=1234
MACAddress=c6:19:52:8f:e6:a0

[MACsecTransmitAssociation]
PacketNumber=1024
KeyId=01
Key=81818181818181818181818181818181

```

closes systemd#5754
ssahani pushed a commit to ssahani/systemd that referenced this issue Apr 3, 2019
networkd: Introduce MACsec
68af436 
This work introduces MACsec to networkd.

Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

11-macsec.netdev
```
[NetDev]
Name=macsec-test
Kind=macsec

[MACSEC]
Port=11

[MACsecReceiveAssociation]
Port=1234
MACAddress=c6:19:52:8f:e6:a0
PacketNumber=1
KeyId=00
Key=82828282828282828282828282828282

[MACsecReceiveChannel]
Port=1234
MACAddress=c6:19:52:8f:e6:a0

[MACsecTransmitAssociation]
PacketNumber=1024
KeyId=01
Key=81818181818181818181818181818181

```

closes systemd#5754
ssahani pushed a commit to ssahani/systemd that referenced this issue Apr 3, 2019
networkd: Introduce MACsec
98de92d 
This work introduces MACsec to networkd.

Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

11-macsec.netdev
```
[NetDev]
Name=macsec-test
Kind=macsec

[MACSEC]
Port=11

[MACsecReceiveAssociation]
Port=1234
MACAddress=c6:19:52:8f:e6:a0
PacketNumber=1
KeyId=00
Key=82828282828282828282828282828282

[MACsecReceiveChannel]
Port=1234
MACAddress=c6:19:52:8f:e6:a0

[MACsecTransmitAssociation]
PacketNumber=1024
KeyId=01
Key=81818181818181818181818181818181

```

closes systemd#5754
ssahani pushed a commit to ssahani/systemd that referenced this issue Apr 3, 2019
networkd: Introduce MACsec
8f5911b 
This work introduces MACsec to networkd.

Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

11-macsec.netdev
```
[NetDev]
Name=macsec-test
Kind=macsec

[MACSEC]
Port=11

[MACsecReceiveAssociation]
Port=1234
MACAddress=c6:19:52:8f:e6:a0
PacketNumber=1
KeyId=00
Key=82828282828282828282828282828282

[MACsecReceiveChannel]
Port=1234
MACAddress=c6:19:52:8f:e6:a0

[MACsecTransmitAssociation]
PacketNumber=1024
KeyId=01
Key=81818181818181818181818181818181

```

closes systemd#5754
ssahani pushed a commit to ssahani/systemd that referenced this issue Apr 3, 2019
networkd: Introduce MACsec
1e65bea 
This work introduces MACsec to networkd.

Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

11-macsec.netdev
```
[NetDev]
Name=macsec-test
Kind=macsec

[MACSEC]
Port=11

[MACsecReceiveAssociation]
Port=1234
MACAddress=c6:19:52:8f:e6:a0
PacketNumber=1
KeyId=00
Key=82828282828282828282828282828282

[MACsecReceiveChannel]
Port=1234
MACAddress=c6:19:52:8f:e6:a0

[MACsecTransmitAssociation]
PacketNumber=1024
KeyId=01
Key=81818181818181818181818181818181

```

closes systemd#5754
ssahani pushed a commit to ssahani/systemd that referenced this issue Apr 4, 2019
networkd: Introduce MACsec
9ec4fba 
This work introduces MACsec to networkd.

Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

11-macsec.netdev
```
[NetDev]
Name=macsec-test
Kind=macsec

[MACsec]
Port=11

[MACsecReceiveAssociation]
Port=1234
MACAddress=c6:19:52:8f:e6:a0
PacketNumber=1
KeyId=00
Key=82828282828282828282828282828282

[MACsecReceiveChannel]
Port=1234
MACAddress=c6:19:52:8f:e6:a0

[MACsecTransmitAssociation]
PacketNumber=1024
KeyId=01
Key=81818181818181818181818181818181

```

closes systemd#5754

aaa
yuwata pushed a commit to yuwata/systemd that referenced this issue Apr 4, 2019
@yuwata
network: Introduce MACsec
c273fae 
Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

Closes systemd#5754
yuwata pushed a commit to yuwata/systemd that referenced this issue Apr 5, 2019
@yuwata
network: Introduce MACsec
128d59c 
Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

Closes systemd#5754
yuwata pushed a commit to yuwata/systemd that referenced this issue Apr 5, 2019
@yuwata
network: Introduce MACsec
2aceeb3 
Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

Closes systemd#5754
yuwata pushed a commit to yuwata/systemd that referenced this issue Apr 5, 2019
@yuwata
network: Introduce MACsec
9691cee 
Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

Closes systemd#5754
yuwata pushed a commit to yuwata/systemd that referenced this issue Apr 5, 2019
@yuwata
network: Introduce MACsec
91a07ba 
Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

Closes systemd#5754
yuwata pushed a commit to yuwata/systemd that referenced this issue Apr 10, 2019
@yuwata
network: Introduce MACsec
cfef6c6 
Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

Closes systemd#5754
yuwata pushed a commit to yuwata/systemd that referenced this issue Apr 10, 2019
@yuwata
network: Introduce MACsec
b320254 
Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

Closes systemd#5754
yuwata pushed a commit to yuwata/systemd that referenced this issue Apr 10, 2019
@yuwata
network: Introduce MACsec
c39bef9 
Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

Closes systemd#5754
yuwata pushed a commit to yuwata/systemd that referenced this issue Apr 10, 2019
@yuwata
network: Introduce MACsec
f72dda8 
Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

Closes systemd#5754
yuwata pushed a commit to yuwata/systemd that referenced this issue Apr 10, 2019
@yuwata
network: Introduce MACsec
58df2a6 
Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

Closes systemd#5754
yuwata pushed a commit to yuwata/systemd that referenced this issue Apr 10, 2019
@yuwata
network: Introduce MACsec
58064ea 
Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

Closes systemd#5754
yuwata pushed a commit to yuwata/systemd that referenced this issue Apr 10, 2019
@yuwata
network: Introduce MACsec
52733f9 
Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

Closes systemd#5754
yuwata pushed a commit to yuwata/systemd that referenced this issue Apr 10, 2019
@yuwata
network: Introduce MACsec
a81d331 
Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

Closes systemd#5754
edevolder pushed a commit to edevolder/systemd that referenced this issue Jun 26, 2019
network: Introduce MACsec
b92bd25 
Media Access Control Security (MACsec) is an 802.1AE IEEE
industry-standard security technology that provides secure
communication for all traffic on Ethernet links.
MACsec provides point-to-point security on Ethernet links between
directly connected nodes and is capable of identifying and preventing
most security threats, including denial of service, intrusion,
man-in-the-middle, masquerading, passive wiretapping, and playback attacks.

Closes systemd#5754
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
network RFE 🎁 Request for Enhancement, i.e. a feature request
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

networkd: Introduce MACsec ssahani/systemd
4 participants
@ssahani @poettering @gkarakou @yuwata